Attachment 576539 Details for Bug 811334 – A policy te file that I created to permit systemd_login_t to signal/kill processes started by users.

A policy te file that I created to permit systemd_login_t to signal/kill processes started by users.

systemd_killer.te (text/plain), 1001 bytes, created by Jonathan Abbey on 2012-04-10 18:08:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jonathan Abbey

Created: 2012-04-10 18:08:02 UTC

Size: 1001 bytes

patch

obsolete

>
>module systemd_killer 2.0;
>
>require {
>	type unconfined_t;
>	type unconfined_java_t;
>	type chrome_sandbox_t;
>	type sshd_t;
>	type xauth_t;
>	type unconfined_dbusd_t;
>	type systemd_logind_t;
>	type chrome_sandbox_nacl_t;
>	type unconfined_execmem_t;
>	class process { signal signull sigkill };
>	class capability kill;
>}
>
>#============= systemd_logind_t ==============
>allow systemd_logind_t self:capability kill;
>allow systemd_logind_t chrome_sandbox_nacl_t:process { signal signull sigkill };
>allow systemd_logind_t chrome_sandbox_t:process { signal signull sigkill };
>allow systemd_logind_t sshd_t:process {signal signull sigkill};
>allow systemd_logind_t unconfined_dbusd_t:process { signal sigkill signull };
>allow systemd_logind_t unconfined_execmem_t:process { signal signull sigkill };
>allow systemd_logind_t unconfined_java_t:process { signal signull sigkill };
>allow systemd_logind_t unconfined_t:process { signal signull sigkill };
>allow systemd_logind_t xauth_t:process { signal signull sigkill };

Actions: View

Attachments on bug 811334: 576539 | 576542 | 576561 | 576573